General

  • Target

    2024-04-30_f7917ebf0289c2758a6aebd12b79ddc2_cryptolocker

  • Size

    38KB

  • MD5

    f7917ebf0289c2758a6aebd12b79ddc2

  • SHA1

    f620b46fcf538c1af8f3bdc744fbf984f9fd10c6

  • SHA256

    2216b9d05400e43df7dd37c72a8cdc57b61b4cc871e6cee6e14d10394b47b0d2

  • SHA512

    127696c2c6298043504eb6ecbe87c42d03b4814059a88b656c3208616c34b8cf053d5ac3fa3027eaec44ef6810d888e297d36251bb5aa69a769ac59fba83723e

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9f:qDdFJy3QMOtEvwDpjjWMl7TA

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_f7917ebf0289c2758a6aebd12b79ddc2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections